arXiv subjects

Alireza Pourafzal

Publications and source records attributed to Alireza Pourafzal.

12 recordsLinked to original sources

arXiv2026

UE-Side Location Privacy for 5G NR Uplink Positioning: Mechanisms and Trade-offs

Future 5G-Advanced and 6G networks increasingly reuse uplink communication waveforms for positioning and sensing. This raises privacy concerns, as user equipments (UEs) may unintentionally reveal precise timing information even when positioning services are not explicitly requested. While prior works show generic orthogonal frequency division multiplexing (OFDM) pilots can be manipulated to degrade time-of-arrival (ToA) estimation without compromising data links, this paper extends these concepts to a realistic 5G new radio (NR) up-link framework including Sounding Reference Signal (SRS), Demodulation Reference Signal (DMRS), Physical Uplink Shared Channel (PUSCH), and standardized 3GPP channel models. We investigate several UE-side privacy mechanisms: optimized pilot distortion, artificial noise, artificial multipath, and delay spoofing. Through 3GPP-compliant sample-level simulations, we assess their impact via localization, communication, and consistency-based detection metrics. The resulting analysis highlights the trade-offs among privacy, communication reliability, and detectability, providing key insights into waveform-level obfuscation for future integrated sensing and communication (ISAC) systems.

eess.SP↗

arXiv2026

Task-Aware Beamforming for Semantic Wireless Localization

Many semantic localization tasks require determining a contextually meaningful region or state rather than minimizing the error of a full Cartesian position estimate. In such settings, aggregate localization accuracy need not align with the accuracy of the semantic decision. This paper develops a Cramér--Rao bound (CRB)-based framework that uses the local geometry of a known semantic map to guide uplink receive beamforming. Using local boundary crossing as a surrogate for semantic misclassification, we derive normal information maximization (NIM), which minimizes the CRB of the position component along the local semantic boundary normal. Under the considered single-path line-of-sight model, an optimal receive codebook can be restricted to the subspace spanned by the matched steering vector and its angular derivative, reducing the design to an allocation of measurement resources between matched and derivative spatial modes. We derive the resulting allocation for a general smooth boundary, with geofencing and intrusion detection arising as radial and tangential limiting cases. The framework is further extended to multi-region semantic maps through a distance-normalized minimax criterion and to uncertain prior locations through worst-case and prior-weighted robust formulations. Numerical results with finite-slot implementations and observation-level Monte Carlo simulations using profile maximum-likelihood (ML) estimation show that NIM allocates measurements according to the task-relevant boundary geometry and can substantially reduce semantic error relative to the classic squared position error bound (SPEB) design in the considered scenarios. The empirical results also closely follow the local CRB-based boundary-crossing approximation in the studied operating regime.

cs.IT↗

arXiv2026

Dual-Orthogonality Waveforms for Integrated Communication and Imaging in Dynamic Multipath Channels

Dual-Orthogonality waveforms are multi-antenna signaling schemes that enforce mutual orthogonality across transmit channels and over a prescribed set of delay shifts. By relaxing strict time orthogonality to the physically admissible propagation region, they preserve full-band operation per transmit antenna while embedding communication data and maintaining stream separability. This makes them attractive for Integrated Sensing and Communications (ISAC), where reliable data transmission, high-resolution sensing, and imaging must coexist under time-varying propagation. In dynamic multipath environments, delay-Doppler dispersion across multiple paths perturbs the transmit subspaces and partially breaks the relaxed orthogonality conditions. This paper analyzes this effect and develops a multipath-aware decoding framework based on structured parameter estimation, effective-subspace reconstruction, and low-complexity linear equalization. Numerical results show communication performance comparable to OFDM-based ISAC and MIMO-OTFS baselines while improving sensing and imaging through full-band per-transmit operation. The proposed approach achieves approximately 30 cm range resolution, more than 15 dB suppression of multipath imaging artifacts with coherent SAR processing, and a favorable sensing-communication trade-off. Over-the-air experiments at 60 GHz validate multi-stream communication, the designed zero-correlation region, and accurate radar ranging. A second campaign in a highly reflective indoor environment further demonstrates multipath-aware stream equalization under strong unsuppressed reflections.

eess.SP↗

arXiv2026

On-Site Beam Calibration for RIS-Aided Positioning Systems

High precision positioning is a key enabler for next-generation communication applications such as smart transportation and augmented reality. Reconfigurable intelligent surface (RIS) technology can enhance positioning by providing additional angular information and improving coverage under obstructed propagation conditions. However, true RIS beams can differ significantly from the simplified or ideal beam response models commonly used in RIS-aided positioning, leading to beam model mismatch and an elevated positioning error floor. This paper proposes an on-site RIS beam calibration framework that reduces this error floor by estimating a realistic 3D RIS beam response model from on-site measurements. The proposed calibration algorithm first extracts the RIS-reflected channel response from signals received by a calibration agent sampling the angular range of interest, using delay-domain sparse recovery, and then estimates the beam model parameters with a gradient-based estimator. To validate the proposed framework, 3D beam patterns under 66 phase modulations were measured and incorporated into simulations. With an angular sampling step of 1 deg, the calibrated model achieves an average beam response similarity of 88.5% with respect to the ground truth, compared with 43.7% for the ideal model. The probability that the absolute lower bound of the positioning error is below 0.5m increases from 0.52 without calibration to 0.74 after calibration, showing that on-site RIS beam calibration effectively reduces the positioning error floor caused by true beam model mismatch.

eess.SP↗

arXiv2026

HoloTrace: a Location Privacy-Preserving Framework for mmWave MIMO-OFDM Systems

The technological innovation towards 6G cellular networks introduces unprecedented capabilities for user equipment (UE) localization, but it also raises serious concerns about physical layer location privacy. This paper introduces HoloTrace, a signal-level privacy preservation framework that relies on user-side spoofing of localization-relevant features to prevent the extraction of precise location information from the signals received by a base station (BS) in a mmWave MIMO-OFDM system. Spoofing is performed by the user on location parameters such as angle of arrival (AoA), angle of departure (AoD), and time difference of arrival (TDoA). Without requiring any protocol modification nor network-side support, our method strategically perturbs pilot transmissions to prevent a BS from performing non-consensual UE localization. The methodology allows the UE to spoof its position, keeping the precoder unchanged. We formulate spoofing as a unified rank-constrained projection problem, and provide closed-form solutions under varying levels of channel state information (CSI) at the UE, including scenarios with and without CSI knowledge. Simulation results confirm that the proposed approach enables the UE to deceive the BS, inducing significant localization errors, while the impact on link capacity varies depending on the spoofed position. Our findings establish HoloTrace as a practical and robust privacy-preserving solution for future 6G networks.

eess.SP↗

arXiv2026

From Pilot to Precoding Design: Blind Angular Spoofing For Location Privacy in MIMO Systems

This paper studies location privacy in uplink MIMO systems, where a user equipment seeks to spoof the angular signature observed by a single base station performing localization. We propose a blind analog precoder design that manipulates the perceived angle-of-arrival and angle-of-departure configuration without requiring channel-gain knowledge. The method enforces consistency between the received signal and a desired spoofed angular subspace, and is solved using an alternating optimization algorithm under practical amplitude constraints. Simulations in a multipath scenario show that the proposed approach achieves near-perfect angular spoofing and clearly outperforms pilot-only blind spoofing, which exhibits an error floor. The results also show a trade-off between spoofing accuracy and communication rate, depending on the chosen virtual geometry.

eess.SP↗

arXiv2026

Mismatch Analysis and Cooperative Calibration of Array Beam Patterns for ISAC Systems

Integrated sensing and communication (ISAC) is a key technology for enabling a wide range of applications in future wireless systems. However, the sensing performance is often degraded by model mismatches caused by geometric errors (e.g., position and orientation) and hardware impairments (e.g., mutual coupling and amplifier non-linearity). This paper focuses on the angle estimation performance with antenna arrays and tackles the critical challenge of array beam pattern calibration for ISAC systems. To assess calibration quality from a sensing perspective, a novel performance metric that accounts for angle estimation error, rather than beam pattern similarity, is proposed and incorporated into a differentiable loss function. Additionally, a cooperative calibration framework is introduced, allowing multiple user equipments to iteratively optimize the beam pattern based on the proposed loss functions and local data, and collaboratively update global calibration parameters. The proposed models and algorithms are validated using real-world beam pattern measurements collected in an anechoic chamber. Experimental results show that the angle estimation error can be reduced from {$\textbf{1.01}^\circ$} to $\textbf{0.11}^\circ$ in 2D calibration scenarios, and from $\textbf{5.19}^\circ$ to $\textbf{0.86}^\circ$ in 3D calibration ones.

eess.SP↗

arXiv2025

Pilot Distortion Design for ToA Obfuscation in Uplink OFDM Communication

We study uplink orthogonal frequency-division multiplexing (OFDM) pilot distortion to deliberately obfuscate time-of-arrival (ToA) estimation at a single base station while preserving communication performance. We design a complex per-subcarrier distortion vector that increases sidelobes of the mismatched ambiguity function (MAF) relative to its mainlobe, using two objectives: the sidelobe-to-peak level ratio and the integrated sidelobe level. The design is subject to a transmit-power budget and a proximity (dissimilarity) constraint around the communication-optimal pilot. Communication impact is quantied by a capacity-motivated lower bound obtained from the linear minimum mean-squared error error covariance with a mismatched channel estimate. The resulting generalized fractional program is solved with Dinkelbach's transform and a difference-of-convex update that yields a closed-form Karush-Kuhn-Tucker step. Simulations on a single-input single-output OFDM link show that the optimized distortions raise MAF sidelobes and degrade delay estimation, as validated by a mismatched maximum-likelihood ToA estimator, while incurring only marginal capacity loss over a broad signal-to-noise ratio range. The method requires no protocol changes or artificial path injection and provides a signal-level mechanism to control ToA observability under communication constraints.

eess.SP↗

arXiv2025

RIS Beam Calibration for ISAC Systems: Modeling and Performance Analysis

High-accuracy localization is a key enabler for integrated sensing and communication (ISAC), playing an essential role in various applications such as autonomous driving. Antenna arrays and reconfigurable intelligent surface (RIS) are incorporated into these systems to achieve high angular resolution, assisting in the localization process. However, array and RIS beam patterns in practice often deviate from the idealized models used for algorithm design, leading to significant degradation in positioning accuracy. This mismatch highlights the need for beam calibration to bridge the gap between theoretical models and real-world hardware behavior. In this paper, we present and analyze three beam models considering several key non-idealities such as mutual coupling, non-ideal codebook, and measurement uncertainties. Based on the models, we then develop calibration algorithms to estimate the model parameters that can be used for future localization tasks. This work evaluates the effectiveness of the beam models and the calibration algorithms using both theoretical bounds and real-world beam pattern data from an RIS prototype. The simulation results show that the model incorporating combined impacts can accurately reconstruct measured beam patterns. This highlights the necessity of realistic beam modeling and calibration to achieve high-accuracy localization.

eess.SP↗

arXiv2025

Privacy Preservation in MIMO-OFDM Localization Systems: A Beamforming Approach

We investigate an uplink MIMO-OFDM localization scenario where a legitimate base station (BS) aims to localize a user equipment (UE) using pilot signals transmitted by the UE, while an unauthorized BS attempts to localize the UE by eavesdropping on these pilots, posing a risk to the UE's location privacy. To enhance legitimate localization performance while protecting the UE's privacy, we formulate an optimization problem regarding the beamformers at the UE, aiming to minimize the Cramér-Rao bound (CRB) for legitimate localization while constraining the CRB for unauthorized localization above a threshold. A penalty dual decomposition optimization framework is employed to solve the problem, leading to a novel beamforming approach for location privacy preservation. Numerical results confirm the effectiveness of the proposed approach and demonstrate its superiority over existing benchmarks.

eess.SP↗

arXiv2025

Joint Near-Field Sensing and Visibility Region Detection with Extremely Large Aperture Arrays

In this paper, we consider near-field localization and sensing with an extremely large aperture array under partial blockage of array antennas, where spherical wavefront and spatial non-stationarity are accounted for. We propose an Ising model to characterize the clustered sparsity feature of the blockage pattern, develop an algorithm based on alternating optimization for joint channel parameter estimation and visibility region detection, and further estimate the locations of the user and environmental scatterers. The simulation results confirm the effectiveness of the proposed algorithm compared to conventional methods.

eess.SP↗

arXiv2025

RIS-Aided Positioning Under Adverse Conditions: Interference from Unauthorized RIS

Positioning technology, which aims to determine the geometric information of a device in a global coordinate, is a key component in integrated sensing and communication systems. In addition to traditional active anchor-based positioning systems, reconfigurable intelligent surfaces (RIS) have shown great potential for enhancing system performance. However, their ability to manipulate electromagnetic waves and ease of deployment pose potential risks, as unauthorized RIS may be intentionally introduced to jeopardize the positioning service. Such an unauthorized RIS can cause unexpected interference in the original localization system, distorting the transmitted signals, and leading to degraded positioning accuracy. In this work, we investigate the scenario of RIS-aided positioning in the presence of interference from an unauthorized RIS. Theoretical lower bounds are employed to analyze the impact of unauthorized RIS on channel parameter estimation and positioning accuracy. Several codebook design strategies for unauthorized RIS are evaluated, and various system arrangements are discussed. The simulation results show that an unauthorized RIS path with a high channel gain or a delay similar to that of legitimate RIS paths leads to poor positioning performance. Furthermore, unauthorized RIS generates more effective interference when using directional beamforming codebooks compared to random codebooks.

eess.SP↗